bc9e5d828061e8fd9850eff84e103514_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc9e5d828061e8fd9850eff84e103514_JaffaCakes118
Size

384KB
MD5

bc9e5d828061e8fd9850eff84e103514
SHA1

034d50a71c694379e70eaecd21a2a9d66ef6ef6d
SHA256

e2177360ad599ecb3bd893e9854013c3ab3e6bbf529c040cc96e930a58243571
SHA512

8ed51f5100080f7c2831ccda23d43f1d553ebb48b5235e20450bf6fd7cf182aab0ce79583dd05fbfb3b7722e6611becb15a37adf25c45a3623f9359631cf52dc
SSDEEP

6144:D5tjRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808Ohy:tR5GdCs0O1BkBqwtjFc0fTjZOT59ozIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc9e5d828061e8fd9850eff84e103514_JaffaCakes118

Files

bc9e5d828061e8fd9850eff84e103514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35b7457c2a3374db89323f2a391eeed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateEventA
IsDebuggerPresent
CreateFileMappingA
IsBadReadPtr
DisconnectNamedPipe
CreateFileA
GetACP
GetConsoleCP
LocalUnlock
GetModuleHandleA
GetStdHandle
GlobalLock
HeapCreate
GetLastError
LoadLibraryExA
CloseHandle
LocalFree
FreeEnvironmentStringsA
GetFullPathNameA

user32

EndDialog
GetDC
DispatchMessageA
SetFocus
GetDlgItem
DefWindowProcA
ScrollWindow
GetMessageA
EmptyClipboard
IsWindow
PostMessageA
GetIconInfo
CreateDialogParamA
DrawIconEx

uxtheme

GetThemeColor
DrawThemeIcon
EnableTheming
GetThemeMetric
CloseThemeData

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ